Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS272547.roa
File:                     AS272547.roa (raw, json)
Hash identifier:          Y9d6TiH0AIZDo9mXnkf3tKkHdNG6Fn6ayfo8SCi7FWA=
Subject key identifier:   65:19:81:E1:AF:DF:24:69:58:8D:C9:5F:44:E9:EA:65:A5:C6:66:55
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       4267A91F0C3869318961FC71A488C5F53B77C1B8
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS272547.roa
Signing time:             Sun 04 Oct 2026 00:52:43 +0000
ROA not before:           Sun 04 Oct 2026 00:47:43 +0000
ROA not after:            Sun 03 Oct 2027 00:52:43 +0000
asID:                     272547
IP address blocks:        79.182.4.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:67:a9:1f:0c:38:69:31:89:61:fc:71:a4:88:c5:f5:3b:77:c1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  4 00:47:43 2026 GMT
            Not After : Oct  3 00:52:43 2027 GMT
        Subject: CN=651981E1AFDF2469588DC95F44E9EA65A5C66655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:ae:38:a6:12:40:f2:33:af:b7:ba:25:e0:
                    e5:71:69:94:26:7e:ec:99:68:40:53:79:b3:7b:38:
                    e1:36:06:65:13:4d:7d:b3:1f:43:9c:4c:5a:16:b4:
                    ea:48:a7:ef:65:78:ff:eb:57:d2:2c:95:cd:4f:7b:
                    eb:68:73:de:f8:1f:01:04:9f:86:d5:86:13:09:51:
                    b2:37:d2:9b:a0:f3:2a:9a:40:d4:32:6a:6b:fc:b8:
                    ae:ef:15:cb:bb:1d:52:6a:e7:76:15:a8:d3:79:ae:
                    01:98:7a:b9:d6:49:82:52:54:33:82:d4:60:7a:a9:
                    93:80:62:54:74:14:0e:ea:43:8b:1f:fd:0c:df:36:
                    89:06:b6:97:c3:68:2e:b9:fa:20:b8:db:d6:9d:2c:
                    c3:e7:fc:ed:68:45:93:68:10:31:79:7b:06:cb:72:
                    03:fe:ae:c4:08:c5:f5:73:8c:0e:56:cd:58:5b:90:
                    63:2e:90:84:40:46:b0:5a:fb:0c:13:a9:c5:da:d5:
                    5b:1b:75:ca:94:de:ff:73:4f:94:1a:32:25:bf:6b:
                    2a:0a:8a:ff:05:4f:05:71:87:8f:e9:f0:46:81:02:
                    46:c9:54:36:8c:ce:17:e7:94:6d:d0:82:e1:72:24:
                    19:35:75:d6:ab:a3:88:af:53:ad:da:b8:18:ae:c9:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:81:E1:AF:DF:24:69:58:8D:C9:5F:44:E9:EA:65:A5:C6:66:55
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS272547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:cf:7d:fb:7f:dc:42:d2:d4:73:fb:4b:16:ba:9e:10:0c:
         ca:07:51:cb:36:4d:3a:74:73:3e:22:b9:75:3e:ab:9e:0e:58:
         4b:bd:84:44:3c:f1:56:29:26:15:91:12:47:72:e2:16:19:3d:
         26:35:85:aa:f6:62:02:cc:2b:92:bc:dc:c4:15:f0:24:be:fe:
         41:97:67:ae:f6:d3:d3:fa:b4:e6:71:0d:8c:e3:3c:6a:8b:21:
         e4:8c:e0:c8:0a:55:d5:3b:ee:4b:99:d1:f1:64:c5:34:fb:02:
         3e:7a:de:f1:de:c8:4d:a1:1b:31:43:da:72:66:bb:16:37:58:
         47:54:b5:32:ee:19:c3:2c:a5:4d:03:b5:42:43:9e:9f:1c:8f:
         53:02:4d:2c:85:98:51:75:42:b9:25:09:3a:45:44:9c:42:0e:
         01:a0:97:42:39:c1:7b:d0:1f:d8:cb:52:25:10:9d:57:b3:7a:
         f0:2d:fa:7a:ef:91:d7:fd:fb:0f:b5:f9:8e:b4:0f:27:22:fc:
         ad:b2:5c:ad:81:24:7e:8a:c5:ed:71:92:07:fb:17:4b:3d:61:
         43:23:b8:f2:c8:f8:ef:4f:e3:6a:41:b5:fe:a2:9a:ad:7d:a5:
         bf:86:73:95:4e:32:24:ca:86:bc:3b:d4:f2:f7:3e:10:50:c2:
         a9:ab:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:46:40 2026 by rpki-client